Vulnerabilities

TI-2020-12516 CVE-2020-15899 · GHSA-p75g-gcv5-42qg

Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.

LOW 34

Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00754 Published 2020-07-28 Fixed in 4.0.0 CWE-345

TI-2020-09951 CVE-2020-12439 · GHSA-6x52-88cq-55q5

LOW 27

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01551 Published 2020-05-05 Fixed in 3.1.0 CWE-404

TI-2020-05460 CVE-2020-6638 · GHSA-7w6p-rwhg-7h3g

LOW 36

Grin through 2.1.1 has Insufficient Validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01324 Published 2020-01-21 Fixed in 3.0.0 CWE-20

TI-2019-06653 CVE-2019-9195 · GHSA-v6c9-7f38-qq3j

MEDIUM 48

util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03588 Published 2019-02-26 No fix listed CWE-22